Attack-surface audits on domains you prove you own.

Verify with DNS TXT, then RokData checks the live site: TLS, headers, leaked files and secrets, public lockfiles (OSV), WordPress/API surface, directory listings, and dangling DNS. Informational — not a Snyk/Aikido git scanner, and not a certificate.

Create account See Deep Metrics

Security findings list with severity badges

Verify first. Audit second.

RokData will not open-scan the internet. Every property must pass DNS TXT or well-known file verification before an audit runs. We never send exploit payloads.

DNS TXT or file proof of ownership
On-demand and weekly recurring audits (Growth+)
Starter 4 / Growth 12 / Solid 30 scans per month
Clear boundary: informational, authorized only

Domain verification with DNS TXT challenge — Ownership proof before any scan starts.

What the crawl actually looks for.

Closer to Aikido’s attack-surface / DAST slice than to Snyk Code. We inspect the website visitors hit — not your git history, containers, or cloud accounts.

TLS: expiry, hostname, key size, SHA-1
Leaked .env, .git, backups, Terraform state, Adminer
Secrets in HTML/JS (Stripe, Slack, GitHub, AWS, JWTs)
Public composer.lock / package-lock.json → OSV advisories
WordPress XML-RPC, user REST, generator, xmlrpc
CSP/HSTS quality, CORS+credentials, SRI, TRACE, directory listing
Dangling CNAME takeover fingerprints on the verified host
SPF, DMARC policy, CAA, MTA-STS

Prioritised security findings — High / medium / low without claiming a pentest.

What we do not pretend to be.

Snyk and Aikido Code scan source in the IDE and pull requests, containers, IaC, and cloud. RokData does not clone repositories, run SAST, or fuzz APIs. Findings map to selected SOC 2 / ISO control tags as evidence — not a certificate.

Actionable copy per check + Marvin recommendations
Resolve and retest workflow
Feeds the Deep Metrics health score

Remediation detail for a security finding — Fix steps clients can follow.

Trust is a weekly habit.

Verify a domain after signup and run an audit on every paid plan. Weekly retests unlock on Growth and Solid.

Create account See plans